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STATUS OF CLAIMS 

The present application was filed on August 8, 2001, with claims 1-18. Claims 1-18 are 
currently pending in the application. Claims 1,17 and 18 are independent claims. 

Each of claims 1-9 and 14-18 stands finally rejected under 35 U.S.C. § 102(b) or §103(a). 
Claims 10-13 are indicated as containing allowable subject matter. Claims 1-9 and 14-18 are 
appealed. 

STATUS OF AMENDMENTS 
' There have been no amendments filed subsequent to the final rejection. 

SUMMARY OF CLAIMED SUBJECT MATTER 
Independent claims 1,17 and 1 8 are directed to a method, an apparatus and a storage medium 
t for storing program code, respectively, for use in providing improved fault tolerance in a computing 

system comprising at least one computing machine. 

In accordance with the invention, a control program is executed in conjunction with a fault 
tolerance software system running on the at least one computing machine, and via the control 
program a test script program is initiated which sends one or more requests to a monitored program. 
The test script program processes corresponding responses to the one or more requests, and generates 
at least one return value utilizable by the control program to indicate a failure condition in the 
monitored program. 

A "fault tolerance software system" as described in the specification is a system which 
includes a failure detection component and a failure recovery component. See the specification at, 
for example, page 1, lines 19-27. 

An illustrative embodiment of the claimed invention is implemented in conjunction with fault 
tolerance middleware 120 that runs on a server machine 104 of a computing system 100. As shown 
in FIG. 3, the fault tolerance middleware 120 is arranged between operating system 122 and a 
monitored application 124 on the server machine 104. 

FIG. 4A illustrates an example of the interaction between fault tolerance middleware 120 and 
a particular monitored application, namely, a server program 140. In this example, the fault 
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tolerance middleware 120 comprises a failure detection component 130 and a recovery component 
132. The failure detection component 130 has associated therewith a control thread 134 and a test 
script 136. The control thread 134 is generated by the failure detection component 130 and 
periodically invokes the test script 136. The test script sends one or more client requests to the 
server program 1 40 and then determines if the correct response or responses have been received from 
the server program. The test script then sends a return value to the control thread to indicate whether 
all responses were received correctly. If any response is not received correctly, then the control 
thread instructs the recovery component 132 to initiate appropriate recovery actions. 

This illustrative embodiment is an example of what is referred to in the specification as 
"periodic external self-test." The term "external" indicates that the test script 136 operates 
independently of any conventional failure detection provided by the fault tolerance middleware. See 
the specification at, for example, page 5, lines 25-29, and page 7, lines 6-24. 

An arrangement of this type is particularly advantageous in that the test scripts can be written 
independently of the original fault tolerance middleware, and do not require any modification of the 
monitored program, either in terms of recompilation or in terms of the addition of static or dynamic 
libraries. See the specification at, for example, page 15, lines 10-16. Also, it can correct more 
failures than conventional arrangements. For example, an embodiment of the invention involving 
a modified watchd process significantly outperforms the conventional watchd process of the above- 
noted SwiFT fault tolerance software system. See Table 1 on page 13, and the text at page 12, line 
14, to page 14, line 27. 

GROUNDS OF REJECTION TO BE REVIEWED ON APPEAL 

1. Claims 1-4, 6-9 and 14-18 stand rejected under 35 U.S.C. §102(b) as being anticipated 
by U.S. Patent No. 5,901,315 to Edwards et al. (hereinafter "Edwards"). 

2. Claim 5 stands rejected under 35 U.S.C. §103(a) as being unpatentable over Edwards. 
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ARGUMENT 

Ground 1: Rejection of Claims 1-4. 6-9 and 14-18 Under 35 U.S.C. S 102(b) 
Claims 1.2. 17 and 18 

Applicants initially note that MPEP §2131 specifies that a given claim is anticipated "only 
if each and every element as set forth in the claim is found, either expressly or inherently described, 
in a single prior art reference," citing Verdegaal Bros, v. Union Oil Co. of California , 814 F.2d 628, 
631, 2 USPQ2d 1051, 1053 (Fed. Cir. 1987). Moreover, MPEP §2131 indicates that the cited 
reference must show the "identical invention ... in as complete detail as is contained in the . . . 
claim," citing Richardson v. Suzuki Motor Co. . 868 F.2d 1226, 1236, 9 USPQ2d 1913, 1920 (Fed. 
Cir. 1989). For the reasons identified below, Applicants submit that the Examiner has failed to 
establish anticipation of claims 1-4, 6-9 and 14-18 by Edwards. 

Independent claim 1, by way of example, is directed to a method for use in providing 
improved fault tolerance in a computing system comprising at least one computing machine. The 
method includes the steps of executing a control program in conjunction with a fault tolerance 
software system running on the at least one computing machine, and initiating via the control 
program a test script program which sends one or more requests to a monitored program, wherein 
the test script program processes corresponding responses to the one or more requests, and generates 
at least one return value utilizable by the control program to indicate a failure condition in the 
monitored program. 

As noted above, a "fault tolerance software system" as described in the specification is a 
system which includes a failure detection component and a failure recovery component. See the 
specification at, for example, page 1, lines 19-27: 

The above-noted conventional fault tolerance systems typically include a failure 
detection component and a failure recovery component. The failure detection component 
determines if a monitored application, process or other program has terminated, aborted or 
otherwise failed. For example, in the above-noted SwiFT system, a monitoring process 
referred to as watchd serves as the failure detection component. The recovery component 
initiates recovery actions in the event that a failure is detected by the failure detection 
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component. A given recovery action may involve restarting the program on the same 
machine or another machine. As is well known, a program may be restarted from its initial 
starting point or via rollback to a designated checkpoint subsequent to its initial starting 
point. 

An illustrative embodiment of the claimed invention is implemented in conjunction with fault 
tolerance middleware 120 that runs on a server machine 104 of a computing system 100. As shown 
in FIG. 3, the fault tolerance middleware 120 is arranged between operating system 122 and a 
monitored application 124 on the server machine 104. 

In the illustrative embodiment, as shown in FIG. 4A and described previously herein, the 
fault tolerance middleware 120 comprises a failure detection component 130 and a recovery 
component 132. The failure detection component 130 has associated therewith a control thread 134 
and a test script 136. The control thread 134 is generated by the failure detection component 130 
and periodically invokes the test script 136. The test script sends one or more client requests to a 
monitored program, namely, server program 140, and then determines if the correct response or 
responses have been received from the server program. The test script then sends a return value to 
the control thread to indicate whether all responses were received correctly. If any response is not 
received correctly, then the control thread instructs the recovery component 132 to initiate 
appropriate recovery actions. 

As mentioned previously, this illustrative embodiment is an example of what is referred to 
in the specification as "periodic external self-test." The term "external" indicates that the test script 
136 operates independently of any conventional failure detection provided by the fault tolerance 
middleware. See the specification at, for example, page 5, lines 25-29, and page 7, lines 6-24. 

Among the advantages associated with an arrangement of this type is that the test scripts can 
be written independently of the original fault tolerance middleware, and do not require any 
modification of the monitored program, either in terms of recompilation or in terms of the addition 
of static or dynamic libraries. See the specification at, for example, page 15, lines 10-16. Also, it 
provides enhanced failure correction relative to conventional arrangements, as was indicated above, 
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and is described in the specification at Table 1 on page 13, and the text at page 12, line 14, to page 
14, line 27. 

Applicants submit that the Edwards reference fails to meet the limitations of claim 1, and 
fails to provide its associated advantages as outlined above. 

Edwards describes a computer software development tool, namely, a debugger. At column 
1, lines 7-11, Edwards identifies the field of his invention as follows, with emphasis supplied: 

The present invention relates generally to computer software development tools and 
more particularly to a method for debugging a Java application that includes native method 
dynamic load libraries (e.g., C or C++ code). 

Those skilled in the art of computer science will readily appreciate that a debugger or other computer 
software development tool is distinct from a fault tolerance software system. As noted above, a fault 
tolerance software system includes not only fault detection capability, but also fault recovery 
capability . Hence the term "fault tolerance." A debugger such as that disclosed in Edwards is not 
a fault tolerance software system, in that it does not exhibit "fault tolerance." Instead, it is used to 
discover faults in a software program that is under development, such that the program designer can 
take appropriate actions, such as altering the program, in order to correct the faults. The debugger 
itself is not configured to provide recovery from any detected faults. That is the job of the program 
designer in the Edwards arrangement. This is apparent from, for example, column 4, lines 9-14, 
which provides as follows, with emphasis supplied: 

As is well-known, representative debug "events" comprise breakpoint events, single 
step events, a load events (which may include dll events) and/or fault events. The function 
of a debugger is to identify such event(s) in the target application (i.e. the application being 
debugged) and report those events back to the user . 

Again, the user, and not the debugger, is responsible for correcting faults, and thus the Edwards 
debugger is not a "fault tolerance software system" as claimed. 
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The Examiner in formulating the § 102(b) rejection argues that the teachings in the Edwards 
reference at column 3, lines 62-67, and column 4, lines 2-14, anticipate each and every limitation 
of claim 1. Applicants respectfully disagree. The relied-upon portions of Edwards relate to 
debugger 19 as shown in FIG. 2. As Applicants described above, this debugger does not comprise 
a "fault tolerance software system." 

Applicants also wish to point out that the § 102(b) rejection is deficient on other grounds. For 
example, even if one were to assume for purposes of argument that the Edwards debugger 19 
constitutes a fault tolerance software system, Edwards still fails to anticipate the claimed 
arrangement. Claim 1 calls for three distinct elements, namely, a control program, a fault tolerance 
software system, and a test script program. Improved fault tolerance, beyond that otherwise 
associated with the fault tolerance software system, is provided through use of the control program 
and test script program, which provide a type of "periodic external self- test" as described previously. 
\ The claim specifies that the control program executes in conjunction with the fault tolerance 

software system, and that the test script program is initiated via the control program. The Examiner 
apparently argues, with reference to FIG. 2 of Edwards, that the debug engine 22 corresponds to the 
claimed control program, that the graphical user interface (GUI) 2 1 corresponds to the claimed fault 
tolerance software system, and that the probe 24 corresponds to the claimed test script program. 
However, the GUI 2 1 cannot itself be viewed as a fault tolerance software system. Instead, each of 
the elements 21, 22 and 24 is identified in Edwards as being an element of the debugger 19. Also, 
Edwards in column 4, lines 2-4, indicates that the debug engine 22 "performs all of the debugging 
work." Finally, GUI 21 and debug engine 22 are apparently related as "front end" and "back end" 
of debugger 1 9. Thus, even if one were, for purposes of argument, to view the debugger 1 9 as a fault 
tolerant software system, its collective elements fail to meet the limitations associated with provision 
of improved fault tolerance via the claimed control program and test script program. 

Accordingly, Edwards fails to disclose an arrangement for providing improved fault 
tolerance, involving the execution of a control program in conjunction with a fault tolerance 
software system running on at least one computing machine of a computing system, and the initiation 
via the control program of a test script program which operates to provide improved fault tolerance 
for the system as claimed. 
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Since Edwards fails to meet at least one limitation of independent claim 1, and also fails to 
provide its associated advantages in terms of improved fault tolerance in a computing system, that 
claim is not anticipated by Edwards. 

Independent claims 1 7 and 1 8 include limitations similar to those of claim 1 , and are believed 
allowable for substantially the same reasons that claim 1 is believed allowable. 

Dependent claim 2 is believed allowable for at least the reasons given above with regard to 
independent claim 1. 

Claim 3 

Dependent claim 3 specifies that the control program comprises a control thread of a failure 
detection process associated with a failure detection component of the fault tolerance software 
system. The Examiner argues that such an arrangement is "inherent" in Edwards because the debug 
engine 22 "is a Java element." Applicants respectfully disagree. First, debug engine 22 is not 
described in Edwards as a Java element. Instead, Edwards at column 3 , lines 52-6 1 , simply indicates 
that debug engine 22 "is preferably implemented in software," without specifying that the debug 
engine is written in any single language. Second, even if one assumes that debug engine 22 is "a 
Java element," that does not mean that it necessarily comprises a control thread of a failure detection 
process associated with a failure detection component of the fault tolerance software system. 

Claim 4 

Dependent claim 4 specifies that the control program comprises a thread of a failure detection 
process and the test script program comprises a process separate from the failure detection process. 
The Examiner apparently argues that the debug engine 22 of Edwards corresponds to the claimed 
control program, and that probe 24 corresponds to the claimed test script program. However, the 
relied-upon portions of Edwards, namely, column 7, lines 58-65, and column 8, lines 42-51, fail to 
provide any teaching or suggestion to the effect that debug engine 22 comprises a thread of a failure 
detection process and probe 24 comprises a process separate from the failure detection process. To 
the contrary, debug engine 22 is simply described in Edwards as performing "all the debugging 
work." 
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Claims 6 and 7 

Dependent claim 6 specifies that the test script program is implemented in an object-oriented 
programming language such that one or more components of the test script program comprise a base 
class from which one or more other components of the test script program are generatable for use 
with the monitored program. The Examiner relies on the teachings in column 6, line 61, though 
column 7, line 16, of Edwards. However, these portions fail to meet the limitation in question. The 
Examiner argues that the probe 24 of Edwards corresponds to the claimed test script program, but 
the relied-upon portions of Edwards fail to provide any disclosure regarding generation of one or 
more components of probe 24 from other components of probe 24 comprising a base class. 

Dependent claim 7 is believed allowable for at least the reasons identified above with regard 
to claim 6, from which it depends. 

Claim 8 

Dependent claim 8 specifies that the one or more components comprising the base class of 
the test script program comprise one or more of an initialization component, an obtain requests 
component, and a request interruption component. This particular test script program component 
structure is not suggested, much less anticipated, by Edwards. The Examiner relies on the teachings 
of Edwards at column 4, lines 47-57, and column 5, lines 1-8, as allegedly disclosing "base classes," 
but the relied-upon portions fail to teach or suggest any of the particular components specified in the 
claim, namely, an initialization component, an obtain requests component, and a request interruption 
component. 

Claim 9 

Dependent claim 9 specifies that the one or more other components generatable from the base 
class of the test script program comprise a request issuance component and a response verification 
component, both particular to the monitored program. Again, this particular test script program 
component structure is not suggested, much less anticipated, by Edwards. The Examiner relies on 
column 9, lines 9-30, of Edwards, but there is no mention in the relied-upon passage regarding the 
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claimed generatable components which comprise a request issuance component and a response 
verification component, particular to a monitored program. 

Claim 14 

Dependent claim 14 specifies that the test script program comprises an interpreted script. 

The Examiner argues that the test script program corresponds to the probe 24 of Edwards, 
but relies on column 9, lines 24-39, as allegedly showing the test script program limitation in 
question. However, the relied-upon portion of Edwards relates primarily to the language of the target 
program, and fails to disclose that probe 24 comprises an interpreted script. 

Claim 15 

Dependent claim 15 specifies that the test script program comprises a native executable. 

The Examiner argues that the test script program corresponds to the probe 24 of Edwards, 
but relies on column 9, lines 24-39, as allegedly showing the test script program limitation in 
question. Again, the relied-upon portion of Edwards relates primarily to the language of the target 
program, and fails to disclose that probe 24 comprises a native executable. 

Claim 16 

Dependent claim 16 specifies that the test script program comprises byte code. 

The Examiner argues that the test script program corresponds to the probe 24 of Edwards, 
but relies on column 9, lines 24-39, as allegedly showing the test script program limitation in 
question. As Applicants noted above, the relied-upon portion of Edwards relates primarily to the 
language of the target program, and fails to disclose that probe 24 comprises byte code. 

Ground 2: Rejection of Claim 5 Under 35 U.S.C. § 103(a) 

Dependent claim 5 is believed allowable for at least the reasons identified above with regard 
to independent claim 1. Moreover, this claim specifies that the control program comprises a thread 
of a failure detection process and the test script program comprises a thread of the same failure 
detection process. The Examiner argues that such an arrangement is obvious in view of Edwards, 
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but there is no teaching or suggestion in Edwards to the effect that debug engine 22 and probe 24 are 
configured in the particular manner claimed. That is, there is no teaching to the effect that debug 
engine 22 and probe 24 comprise respective threads of a single failure detection process as set forth 
in the claim. 

Applicants further submit that the Examiner has failed to present sufficient objective 
evidence of motivation to modify the Edwards teachings to reach the claim limitations in question. 
For example, the Examiner argues that it would be obvious to implement debug engine 22 and probe 
24 as different threads of the same process, but one skilled in the art would be more likely to 
implement debug engine 22 and probe 24 as separate processes, since it appears that is how they are 
actually implemented in Edwards. Accordingly, the separate nature of debug engine 22 and probe 
24 in Edwards should be viewed as a direct teaching away from the limitations of claim 5. 

In view of the above, Applicants believe that claims 1 - 1 8 are in condition for allowance, and 
respectfully request the withdrawal of the § 102(b) and § 103(a) rejections. 



Respectfully submitted, 



Date: April 7, 2005 




Attorney for Applicant(s) 
Reg. No. 37,922 
Ryan, Mason & Lewis, LLP 
90 Forest Avenue 
Locust Valley, NY 11560 
(516) 759-7517 
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CLAIMS APPENDIX 

1 . A method for use in providing improved fault tolerance in a computing system comprising 
at least one computing machine, the method comprising the steps of: 

executing a control program in conjunction with a fault tolerance software system 
running on the at least one computing machine; and 

initiating via the control program a test script program which sends one or more 
requests to a monitored program, wherein the test script program processes corresponding responses 
to the one or more requests, and generates at least one return value utilizable by the control program 
to indicate a failure condition in the monitored program. 

2. The method of claim 1 wherein the computing system is configured in accordance with 
a client-server architecture and the at least one computing machine comprises a server of the 
computing system. 

3. The method of claim 1 wherein the control program comprises a control thread of a failure 
detection process associated with a failure detection component of the fault tolerance software 
system. 

4. The method of claim 1 wherein the control program comprises a thread of a failure 
detection process and the test script program comprises a process separate from the failure detection 
process. 
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5. The method of claim 1 wherein the control program comprises a thread of a failure 
detection process and the test script program comprises a thread of the same failure detection 
process. 

6. The method of claim 1 wherein the test script program is implemented in an object- 
oriented programming language such that one or more components of the test script program 
comprise a base class from which one or more other components of the test script program are 
generatable for use with the monitored program. 

7. The method of claim 6 wherein the object-oriented programming language comprises the 
Java programming language. 

8. The method of claim 6 wherein the one or more components comprising the base class 
comprise one or more of an initialization component, an obtain requests component, and a request 
interruption component. 

9. The method of claim 8 wherein the one or more other components generatable from the 
base class comprise a request issuance component and a response verification component, both 
particular to the monitored program. 

10. The method of claim 9 wherein for each of the requests specified in the obtain requests 
component, that component creates corresponding ones of the request issuance component and the 
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request interruption component, and wherein the request interruption component terminates the 
corresponding request if a response from the monitored program is not received within a designated 
period of time. 

1 1 . The method of claim 1 wherein the control program initiates a persistent program, and 
the persistent program periodically initiates the test script program. 

12. The method of claim 1 1 wherein the persistent program comprises at least one of a 
thread and a process. 

13. The method of claim 1 1 wherein the persistent program receives the return value from 
the test script program and delivers it to the control program. 

14. The method of claim 1 wherein the test script program comprises an interpreted script. 

15. The method of claim 1 wherein the test script program comprises a native executable. 

16. The method of claim 1 wherein the test script program comprises byte code. 

17. An apparatus for use in providing improved fault tolerance in a computing system, the 
apparatus comprising: 
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at least one computing machine having a processor and a memory, the processor 
being operatively coupled to the memory, wherein the processor is operative: (i) to execute a control 
program in conjunction with a fault tolerance software system running on the at least one computing 
machine, and (ii) to initiate via the control program a test script program which sends one or more 
requests to a monitored program, wherein the test script program processes corresponding responses 
to the one or more requests, and generates at least one return value utilizable by the control program 
to indicate a failure condition in the monitored program. 

1 8 . A storage medium for storing program code for use in providing improved fault tolerance 
in a computing system comprising at least one computing machine, wherein the program code when 
executed on the at least one computing machine performs the steps of: 

executing a control program in conjunction with a fault tolerance software system 
running on the at least one computing machine; and 

initiating via the control program a test script program which sends one or more 
requests to a monitored program, wherein the test script program processes corresponding responses 
to the one or more requests, and generates at least one return value utilizable by the control program 
to indicate a failure condition in the monitored program. 
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